For a Philippine factory, ISO 9001:2026 leaves the production controls alone and raises the bar around them. Clause 8, which carries process validation, traceability, preservation, supplier control, release and nonconforming output, is substantively identical to the 2015 edition. What is new sits in leadership, planning and awareness: top management must promote quality culture and ethical behaviour (5.1.1 i)), risks must be analysed and evaluated with disruption named as a risk (6.1.2 and NOTE 1), opportunities get a sub-clause of their own (6.1.3), and changes must be communicated, monitored and reviewed (6.3 e) to g)). Certificates to ISO 9001:2015 remain valid until 30 September 2029.
Gap assessment, documentation update, training, internal audit and support through your transition audit, delivered end to end by our expert, experienced, professional and friendly local Filipino lead auditors.
Key facts for manufacturers
- ISO 9001:2026 was published on 16 September 2026 as the sixth edition (36 pages). It cancels and replaces ISO 9001:2015 and carries Amendment 1:2024 (climate change) in its base text.
- Global ACI (Global Accreditation Cooperation Incorporated, which took over the roles of IAF and ILAC on 1 January 2026) has issued the transition requirements, Global ACI-TECH-3-TR 2029-09-30 (M): a three-year period ending 30 September 2029, with new and initial accredited certifications only to the 2026 edition from 31 March 2028.
- No new mandatory documents or records. The production records you keep today under 8.5, 8.6 and 8.7 are the records the 2026 edition asks for.
- The changes that need factory time rather than desk time are quality culture and ethical behaviour (5.1.1 i), 7.3 e)) and the analysis behind the risk and opportunity registers (6.1.2, 6.1.3).
- Sterling does not certify. We prepare manufacturers for accredited certification bodies and conduct the internal audits and gap analyses that come before their visit.
Where the 2026 edition touches a factory
The additions are few, and each one lands somewhere specific in a plant: the context review, the policy, the risk register, the change plan, the toolbox talk and the management review agenda. The table below maps every new or strengthened requirement to the place a certification auditor will look for it on a production site, so that the transition can be planned as a short list of jobs rather than a rewrite.
| Requirement | What it asks | Where an auditor will look in a factory |
|---|---|---|
| 4.1 climate change | Determine whether climate change is relevant to the QMS, and record the decision either way | Context review; typhoon, flood and power exposure of the site and its inbound supply |
| 4.2 c) | Decide which interested-party requirements the QMS addresses | Customer specifications, PEZA and regulatory obligations, buyer codes of conduct: which ones the system manages |
| 5.1.1 i) and 7.3 e) | Leadership promotes quality culture and ethical behaviour; everyone is aware of it | Operator interviews on the line; how a stopped batch is treated; whether records are honest |
| 5.2.1 e), 5.2.2 d) | Policy takes context into account, supports strategy, and is implemented | A policy that says something about this plant, not any plant |
| 6.1.2 and NOTE 1 | Risks determined, analysed and evaluated; disruption named | Risk register with likelihood and consequence reasoning; continuity of supply and production |
| 6.1.3 | Opportunities determined, analysed and evaluated; actions appropriate to context | Yield, scrap and automation projects chosen with a reason and reviewed for effect |
| 6.3 c), e), f), g) | Changes planned with information, communication, monitoring and review | A line relocation, a new MES, a shift pattern change, the transition itself |
| 7.1.6 | Knowledge retained, applied and shared | Set-up sheets, tribal knowledge captured before the senior technician retires |
| 8.2.1 e) | Customer information on contingency actions includes disruptions | What export buyers are told when a typhoon shuts the plant |
| 9.1.3 e), f); 9.3.2 c), g), h) | Risk and opportunity actions evaluated separately; interested-party changes reviewed | Management review minutes with three new inputs |
| 10.1 | Improvement covers processes and future needs | Improvement projects that are not fixes to past problems |
What does not change: the production controls in Clause 8
Every operational requirement a factory was audited against in 2015 remains in 2026, unchanged in substance. Planning of operations, review of customer requirements, design where you design, control of external providers, production under controlled conditions, traceability, preservation, control of changes, release and nonconforming outputs are all still there with the same intent, and so are the calibration requirements. Your existing production records satisfy the new wording as they are.
To be specific: 8.1, 8.2.2 to 8.2.4, 8.3, 8.4, 8.5.1 to 8.5.6, 8.6 and 8.7 are substantively identical, as are 7.1.5.1 and 7.1.5.2 on monitoring and measuring resources and calibration. The only difference is the wording that requires records: “retain documented information” has become “documented information shall be available as evidence of”, which Annex A.2 e) explains as the retention of objective evidence. Batch records, inspection records, calibration certificates and release signatures meet it without alteration. Any procedure or checklist that quotes a 2015 clause letter from 5.1.1, 5.3, 6.1, 6.2.1, 7.3, 9.1.3 or 9.3.2, or cites the deleted 10.3, needs its references updated; that is a find-and-replace job, not a rewrite.
Traceability and process validation under the 2026 wording
8.5.2 still requires suitable means to identify outputs, to identify their status against monitoring and measurement requirements through production, and to control unique identification and keep the evidence where traceability is a requirement. 8.5.1 still requires validation, and periodic revalidation, of processes whose output cannot be verified by later inspection. Neither requirement has moved; what has changed is the knowledge and culture requirements that sit underneath them.
For an electronics or automotive-component exporter, traceability is always a requirement because the customer says so; for a fabricator making to drawing, it may be a requirement only for pressure-retaining or safety-critical items, and the scope statement (4.3) should say which. Welding, heat treatment, plating, sterilisation, sealing and adhesive bonding remain the usual candidates for validation under 8.5.1. The 2026 edition adds one useful piece of vocabulary: the definition of process in Clause 3 (3.8) notes that a process whose output cannot readily be validated is often called a “special process”, which is the term most Philippine buyers already use.
Two 2026 changes strengthen the ground under these controls without touching them. 7.1.6 now requires organisational knowledge to be retained, applied and shared, so the machine settings that only one technician knows are a finding waiting to happen. And 5.1.1 i) with 7.3 e) means the auditor will ask the operator, not the supervisor, what happens when a measurement is out of tolerance and the shipment is due.
Supplier control (8.4) and the requirements that now surround it
8.4.1 to 8.4.3 are unchanged: criteria for evaluating, selecting, monitoring and re-evaluating external providers with records; type and extent of control matched to the provider’s potential effect on your ability to meet requirements; and defined information to providers on what you need. What has changed is the planning around suppliers, because disruption, contingency information and changing buyer expectations are now named in 6.1.2, 8.2.1 e) and 9.3.2 c).
6.1.2 NOTE 1 names the ability to keep providing conforming products during and after a disruption as a risk the organisation can determine, which brings single-source resin, imported steel and the port at Manila into the risk register with an analysis behind each entry rather than a one-line mention. 8.2.1 e) requires that customer information on contingency actions include disruptions to the provision of products, so your export buyer’s escalation contact and your contractual notice period for supply failure are now customer communication under the QMS. And 9.3.2 c) makes changes in interested-party expectations a management review input; a buyer that has just added a conflict-minerals declaration or a carbon-data request to its supplier code is exactly what that item is for. Supplier performance itself remains a management review trend under 9.3.2 d) and an analysis output under 9.1.3 g).
Quality culture and ethical behaviour on the shop floor
The requirement is short: top management shall promote quality culture and ethical behaviour (5.1.1 i)), reflected in shared values, attitudes, practices and actions (NOTE 2), and people doing work under the organisation’s control shall be aware of it (7.3 e)). There is no documented-information requirement attached to either. On a production floor it is tested by interview and observation, not by reading a values poster.
On a Philippine line the test is concrete, and every auditor in the country knows it: will the operator who sees the out-of-tolerance reading stop the batch when the shift is behind and the supervisor has already signed the traveller? Will the QC inspector record the measurement taken, or the one expected? Will rework be logged as rework or buried in scrap? Hierarchy is not the problem; hierarchy that punishes the person who stopped the line is. The 7.1.4 NOTE makes the link explicit, observing that social and psychological factors in the work environment can be influenced by the organisation’s quality culture and ethical behaviour.
Auditors will interview at three levels with the same questions, watch how a supervisor reacts when a nonconformity is found in front of the team, and read the records for what they imply, including whether the incentive scheme pays for output with no quality condition. The evidence that works is behavioural and cheap: a stop-the-line authority stated by the plant manager in person, a route for raising a concern that bypasses the immediate supervisor, and a visible example of someone praised for stopping a shipment. Our quality culture and ethical behaviour page sets out a twelve-week evidence sequence.
Disruption: typhoons, brownouts and the port
6.1.2 now requires risks to be determined, analysed and evaluated, and its NOTE 1 names disruption directly. For a plant in Laguna, Cavite, Cebu or Davao the honest register includes typhoon and flood closure, grid interruption, port congestion and the loss of a single key supplier, each with a likelihood and consequence rating, a treatment decision and an effectiveness check. None of this requires a business continuity standard.
Each entry feeds 9.1.3 e) (was the action effective) and 9.3.2 g) (reviewed by top management), which is where most 2015 registers went quiet. The climate determination in 4.1 sits alongside; for most Philippine manufacturers the truthful answer is that climate change is relevant through weather exposure and energy reliability, and the standard asks for that determination, not for carbon accounting. Nothing here imports ISO 22301; a generator test log, an alternative supplier on file and a customer notification arrangement under 8.2.1 e) are usually the whole of the evidence, and the treatment options in 6.1.2 NOTE 2 include retaining a risk by informed decision, which is an acceptable answer for a low-likelihood event provided the decision is visible.
Industry 4.0: what the standard says about MES, automated inspection and data
ISO 9001:2026 does not require automation and does not mention artificial intelligence. It acknowledges technology in NOTEs and in Annex A, both informative. The 7.1.3 NOTE lists infrastructure for all types of work, including equipment as hardware and software and information and communication technology. For a plant running an MES, automated inspection or sensors, the audit questions are the old ones applied to new equipment.
Annex A.7.1.3 observes that emerging technologies can introduce risks and opportunities for infrastructure management and control; A.7.1.2 says the same of technologies used to support people in their roles; A.7.1.5 recognises IT systems for data collection and analysis as measurement resources; A.7.4 recognises automated interactions between devices as communication; and A.5.3 states that where technologies support the management of the QMS, confidence depends on reliable information for decisions and clarity about who holds responsibility and authority for them.
In audit terms: is the vision system a monitoring and measuring resource under 7.1.5.1, and has its fitness been verified? Are its records protected from unintended alteration under 7.5.3.2? Who owns the decision when the algorithm rejects a lot (5.3, A.5.3)? What risks and opportunities did you determine when you introduced it (6.1.2, 6.1.3)? Where AI itself needs governing, ISO/IEC 42001 is the management system standard for it, and it integrates under the same structure. The technology, remote work and AI page lists every reference in the text.
Opportunities as improvement projects, not slogans
Most 2015 registers listed opportunities as the mirror image of risks. 6.1.3 requires opportunities to be determined, analysed and evaluated, with actions appropriate to the organisation’s context, integrated into processes and checked for effect (9.1.3 f), 9.3.2 h)). In a factory the candidates already exist as improvement projects; the requirement is to choose them with a reason and record the result.
The yield project on line 3, the changeover-time reduction, the supplier development programme, the automation business case: putting each in an opportunity register with the expected benefit, the feasibility, the decision and the outcome is the whole of the requirement, and it turns kaizen activity into audit evidence. The 6.1.3 NOTE gives the range the standard has in mind, including new practices, new products, partnerships and emerging technologies. 10.1 completes the loop by making improvement of processes and attention to future needs and expectations explicit action areas, so a plant that only ever records corrective actions will be asked what it improved that was not a fix.
PEZA locators, export buyers and customer audits
For PEZA-registered locators and exporters, ISO 9001 certification is rarely optional; it is written into buyer qualification. Buyer audits and certification audits are different events: the buyer audits your capability for its products; the certification body audits your system against the standard. The 2026 edition narrows the gap, because buyer auditors already probe the things the new requirements name.
Supply-chain resilience, data integrity and whether an operator can stop a line are now 6.1.2, 5.1.1 i) and 7.3 e), so the same evidence serves both audits. Two dates matter for buyer paperwork. Your ISO 9001:2015 certificate remains valid until 30 September 2029, and a buyer’s supplier-quality team should be told so if a competitor claims otherwise. From 31 March 2028 new and initial accredited certifications can only be issued to the 2026 edition, so a certificate that still reads “2015” in 2028 will invite questions from procurement teams that watch these dates, even though it remains valid.
A transition plan for a plant
The work for a functioning 2015 system is a short sequence: brief leadership, run the gap analysis, split and analyse the registers, revise the policy and the management review agenda, build the culture evidence over several weeks, then audit internally and review before the certification body’s transition visit. The table sets out the steps, the clauses and the typical timing for a single-site plant.
| Step | What happens | Clauses | Typical timing |
|---|---|---|---|
| 1 | Obtain the standard; brief the plant manager and top management on 5.1.1 i) and k), 5.2.1 e), 6.1.3, 6.3 e) to g) | 5 | Week 1 |
| 2 | Gap analysis against the published register; documentation review | 4 to 10 | Weeks 1 to 2 |
| 3 | Gap report with the scope of work and the number, before commitment (Sterling Revise™ week two) | — | Week 2 |
| 4 | Split and rebuild the risk and opportunity register with analysis; add disruption | 6.1.2, 6.1.3 | Weeks 3 to 6 |
| 5 | Revise the policy; update the management review agenda; plan the transition as a change | 5.2, 9.3.2, 6.3 | Weeks 3 to 6 |
| 6 | Leadership statements, concern route, toolbox briefings for 7.3 e) | 5.1.1 i), 7.3 e) | Weeks 4 to 12 |
| 7 | Internal audit to the 2026 edition; management review of results | 9.2, 9.3 | Weeks 12 to 16 |
| 8 | Transition audit at surveillance, recertification or a special audit, once your certification body is accredited for the 2026 edition | — | 2027 onwards |
The transition audit may be conducted with a surveillance or recertification visit or as a separate special audit, and Global ACI permits it to be conducted remotely by ICT where appropriate. For a factory we advise an on-site audit; culture is observed, not uploaded.
How Sterling helps Philippine manufacturers
Sterling International Consulting delivers on site from Makati, Cebu and Davao, led by lead auditors who have sat on both sides of certification audits in electronics, automotive components, packaging, metal fabrication and food processing. We prepare plants for accredited certification bodies; we do not issue certificates, and we say so because the separation is what gives the certificate its value with buyers.
For certified plants, Sterling Revise™ is the fixed-scope transition: week one documentation review and gap assessment against the ISO 9001:2026 standard, week two gap report with the number before you commit, weeks three and four plan, certification-body booking and first updates. For plants certifying for the first time, we build to the 2026 standard from day one. Where a client runs its registers and records in Effivity, the split registers, the 6.3 change plan and the new management review inputs are a configuration change rather than a rebuild. Call +63 977 815 1204, email info@iso-philippines.com or book a consultation.
Don’t take our word for it — read our clients’.
80+ verbatim client feedback letters → — searchable by standard and industry, quoted word-for-word from signed originals you can verify. And see the organizations we serve — Unilab, McDonald’s, SAP, GE, ZTE, JLL and more.
Plan your ISO 9001:2026 transition with Sterling
Free consultation for certified companies and first-timers · ISO 9001:2026 transition and implementation planning against the ISO 9001:2026 standard · itemized quotation within 48 hours. Call +63 977 815 1204, email info@iso-philippines.com, or book your slot →.
Frequently asked questions
Does ISO 9001:2026 change the production requirements in Clause 8? No. Planning, customer requirements, design, purchasing, production and service provision, traceability, preservation, release and nonconforming outputs are substantively identical to ISO 9001:2015. The wording that requires records changed to “shall be available as evidence of”; the list of records did not. Existing batch, inspection, calibration and release records satisfy the 2026 edition as they stand.
Is our ISO 9001:2015 certificate still accepted by export buyers? Yes. Under Global ACI-TECH-3-TR 2029-09-30 (M) it remains valid until 30 September 2029. Buyers verify that a certificate is current and issued under accreditation, not which edition it names. From 31 March 2028 new and initial accredited certificates can only be issued to the 2026 edition, which is when a 2015 certificate starts to look dated.
Does the climate-change requirement mean carbon accounting for our factory? No. 4.1 requires you to determine whether climate change is relevant to your QMS and to record the decision. For most Philippine plants the answer is yes through typhoon, flood and power exposure, which then feeds the risk register under 6.1.2 with a likelihood and consequence rating. No emissions data is required by ISO 9001:2026.
How will auditors test quality culture on the shop floor? By interviewing operators, supervisors and managers with the same questions, observing how problems raised during the audit are received, and reading records for honesty. There is no document to inspect; 5.1.1 i) and 7.3 e) carry no documented-information requirement. Consistent answers across levels are the evidence; a contradiction between what leadership states and what an operator does is the finding.
Does ISO 9001:2026 require us to automate or adopt Industry 4.0 tools? No. The standard is technology-neutral and does not mention artificial intelligence. Where you use an MES, automated inspection or sensors, the existing requirements on measurement resources (7.1.5), documented information (7.5) and responsibility (5.3) apply, with Annex A.5.3 and A.7.1.3 explaining the intent. ISO/IEC 42001 governs AI management systems separately.
Can we combine the ISO 9001 transition with ISO 14001:2026? Yes. Both editions use the same Harmonized Structure text, and 4.2 c), 6.3 and 9.3.2 c) read the same in each. One gap analysis, one internal audit cycle and one management review cover both, and a certification body auditing an integrated system can conduct both transition audits in one visit; see the integrated transition page.
Do we need a new quality manual or new procedures? No. ISO 9001:2026 requires no quality manual and no documented procedures, and it adds no mandatory documents. Update the documents that cite the 2015 edition or its list letters, split the risk and opportunity register, add the new management review inputs and record the climate determination. Everything else in a working 2015 documentation set carries over.
Should a factory that is not yet certified build to 2015 or 2026? To 2026. Every 2015 requirement is retained, the additions are a short list, and from 31 March 2028 new accredited certificates can only be issued to the 2026 edition. A system built to 2015 today would need a transition audit within its first certification cycle. See our implementation page for the phased plan.
Read next
The ISO 9001:2026 playbook; the clause-by-clause register of changes; risks and opportunities in ISO 9001:2026; ISO 9001:2026 for food and beverage manufacturers; what the transition costs; and ISO 9001:2026 transition consulting from Sterling.
Sources
ISO 9001:2026, Quality management systems — Requirements, sixth edition (published 16 September 2026): 3.8, 4.1, 4.2 c), 4.3, 5.1.1 i) and k) and NOTE 2, 5.2.1 e), 5.2.2 d), 5.3, 6.1.2 and NOTEs 1 and 2, 6.1.3 and NOTE, 6.3 c) and e) to g), 7.1.3 NOTE, 7.1.4 NOTE, 7.1.5.1, 7.1.5.2, 7.1.6, 7.3 e), 7.5.3.2, 8.1 to 8.7, 8.2.1 e), 9.1.3 e) to g), 9.3.2 c), d), g), h), 10.1, Annex A.2 e), A.5.3, A.7.1.2, A.7.1.3, A.7.1.5, A.7.4. Global ACI-TECH-3-TR 2029-09-30 (M), Transition Requirements for ISO 9001:2026, issue date 4 September 2026, announced by Global ACI on 16 September 2026. ISO/IEC 42001, Information technology — Artificial intelligence — Management system. ISO 14001:2026 (published 15 April 2026).
Certified to ISO 9001:2015? Take the free ten-minute ISO 9001:2026 gap check, then let a local Sterling lead auditor turn your result into your transition plan.